$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce8bca74-39ea-3f89-a22c-2a8281e81e9c.roa File: ce8bca74-39ea-3f89-a22c-2a8281e81e9c.roa (raw, json) Hash identifier: 7mdDTIWiI1MJIGrvd522ncfQ/waJB0hUlvJNiEe0ONg= Subject key identifier: 34:DB:FB:A5:55:0C:27:04:34:46:7B:7B:79:A6:6B:D1:9C:42:9D:00 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B87255D5B4471D8EF1AA14240 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce8bca74-39ea-3f89-a22c-2a8281e81e9c.roa Signing time: Wed 15 Oct 2025 08:17:07 +0000 ROA not before: Wed 15 Oct 2025 08:17:07 +0000 ROA not after: Tue 13 Jan 2026 09:17:07 +0000 asID: 18779 IP address blocks: 104.253.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:25:5d:5b:44:71:d8:ef:1a:a1:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 15 08:17:07 2025 GMT Not After : Jan 13 09:17:07 2026 GMT Subject: CN=ce86872b-b157-4a50-b1e5-64d51cd600be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bf:88:35:64:16:ce:83:99:24:fa:e9:34:2b: f4:c5:2e:49:5f:49:27:45:8d:5b:94:99:c0:ba:61: 80:9b:cb:ce:61:c1:45:40:7d:00:2f:ac:be:0c:d1: ae:33:2a:cb:71:38:52:2c:65:1c:9b:75:17:70:80: 0f:a4:e7:97:24:2b:38:7f:6d:1a:f1:88:3c:d2:5e: eb:6a:df:8e:5d:f1:09:4b:1b:92:0e:51:3a:1c:6a: 6f:94:ed:73:60:ce:3a:b5:83:1b:7b:c3:cc:62:4a: 7c:2b:d8:5d:54:1c:36:b9:cd:8a:e6:ab:52:ab:b8: 86:18:e1:52:cb:ae:5a:68:b7:04:ef:d5:1b:10:ad: b3:4e:b6:42:10:05:1e:68:22:78:85:11:24:9f:31: 3b:8e:01:03:d8:05:78:5d:2a:57:fb:4e:3e:ad:61: 99:60:a6:bf:b3:76:b3:a6:10:3c:42:cd:45:50:3c: 91:ef:41:2a:58:fe:99:20:27:21:3b:32:65:5a:3e: ce:1b:df:ae:8b:e6:17:3e:74:23:58:7e:8b:3b:6a: e8:39:aa:c2:d5:dd:21:28:51:f8:63:0e:0c:b0:21: 06:a8:db:a9:ce:61:b9:50:6a:f2:03:21:3e:d4:b9: cd:3d:5c:35:16:33:24:43:e0:b7:77:85:86:58:ed: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DB:FB:A5:55:0C:27:04:34:46:7B:7B:79:A6:6B:D1:9C:42:9D:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce8bca74-39ea-3f89-a22c-2a8281e81e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b0:1c:90:57:45:60:5f:56:5b:2d:e7:6b:c7:b6:ea:ef:e3: 81:ee:7b:d7:34:74:45:48:31:23:3d:ee:34:2e:86:34:b6:d7: a3:06:fe:75:fa:43:90:f2:a0:f3:90:65:86:60:f6:88:9d:15: 71:6d:c4:8f:8c:6a:a4:de:55:a1:89:08:73:2f:7e:a9:ce:38: c2:8b:4b:88:6d:52:29:2b:c8:23:e5:a7:02:ff:69:a1:23:0a: d5:23:ba:f3:7d:78:f5:37:d1:15:21:5e:3e:de:69:e3:32:5f: 1e:3d:e8:7f:d0:cb:9f:7c:c6:bd:71:93:c1:58:fc:ff:c4:88: a5:c6:d8:07:f5:28:7c:ad:79:05:ac:c0:df:d7:e0:04:6b:1f: 0d:53:ed:de:ae:c7:4c:8c:29:25:9c:1f:76:81:fa:58:d8:62: 55:7f:69:f4:b0:f4:e0:a5:32:a4:ef:ec:22:1a:12:3d:83:24: c7:1e:65:06:a7:1e:d0:3a:79:6e:4c:32:c5:e9:37:77:41:30: 75:f5:8c:34:ca:42:58:36:9b:1f:44:cb:e2:13:45:44:4f:de: cb:c2:12:cf:d4:b5:df:60:6e:7e:37:10:dd:48:3e:f7:59:7b: 73:17:47:b6:22:35:50:1c:45:7c:12:de:26:9b:d6:5a:16:7c: 49:eb:b3:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHJV1bRHHY7xqhQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAxNTA4MTcwN1oXDTI2MDExMzA5MTcwN1owLzEtMCsGA1UEAxMk Y2U4Njg3MmItYjE1Ny00YTUwLWIxZTUtNjRkNTFjZDYwMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b+INWQWzoOZJPrpNCv0xS5JX0knRY1blJnA umGAm8vOYcFFQH0AL6y+DNGuMyrLcThSLGUcm3UXcIAPpOeXJCs4f20a8Yg80l7r at+OXfEJSxuSDlE6HGpvlO1zYM46tYMbe8PMYkp8K9hdVBw2uc2K5qtSq7iGGOFS y65aaLcE79UbEK2zTrZCEAUeaCJ4hREknzE7jgED2AV4XSpX+04+rWGZYKa/s3az phA8Qs1FUDyR70EqWP6ZICchOzJlWj7OG9+ui+YXPnQjWH6LO2roOarC1d0hKFH4 Yw4MsCEGqNupzmG5UGryAyE+1LnNPVw1FjMkQ+C3d4WGWO1NEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTb+6VVDCcENEZ7e3mma9GcQp0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2U4YmNhNzQtMzllYS0z Zjg5LWEyMmMtMmE4MjgxZTgxZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECwHJBXRWBfVlst52vHturv44Hue9c0dEVIMSM97jQuhjS216MG/nX6 Q5DyoPOQZYZg9oidFXFtxI+MaqTeVaGJCHMvfqnOOMKLS4htUikryCPlpwL/aaEj CtUjuvN9ePU30RUhXj7eaeMyXx496H/Qy598xr1xk8FY/P/EiKXG2Af1KHyteQWs wN/X4ARrHw1T7d6ux0yMKSWcH3aB+ljYYlV/afSw9OClMqTv7CIaEj2DJMceZQan HtA6eW5MMsXpN3dBMHX1jDTKQlg2mx9Ey+ITRURP3svCEs/Utd9gbn43EN1IPvdZ e3MXR7YiNVAcRXwS3iab1loWfEnrs+U= -----END CERTIFICATE-----Generated at Tue Nov 4 23:05:09 2025 by rpki-client